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ONLINE DISTRIBUTED PATH ROUTING METHOD AND SYSTEM 

5 BACKGROUND OF THE INVENTION 

This invention relates ■ generally to the field of optical 
communication systems and specifically to determining a 
protection path through an Wave Division Multiplexing (WDM) 
network . 

10 The popularity of the Internet has created a deluge of data 

traffic. The data traffic may force service providers to consider 
new infrastructures that meet the explosive demand for bandwidth. 
Wavelength Division Multiplexing (WDM) , which allows a single 
fiber to carry multiple signals simultaneously , is perceived to 
f«il5 be a promising candidate to address the bandwidth shortage on the 
□ Internet. While the enormous amount of bandwidth provided by WDM 

may help alleviate the mounting pressure for higher access speed, 
p it also makes protection/restoration a very important issue in 

network management. For example, current technology allows up to 
fl§20 128 wavelengths to be multiplexed in a single fiber, each with 
s a data rate up to 10 Gbps. This roughly translates into millions 

jlj of telephone calls on a single fiber. Hence it is easy to 

S.i-3 

U comprehend the catastrophic consequence a fiber cut may cause 
]^ without an appropriate protection mechanism in place. 
1^25 Different types of protection schemes have been developed 

for optical networks. Many existing transport networks use 
Synchronous Optical NETwork (SONET) rings. SONET rings are simple 
topologies which contain two separate paths between any pair of 
nodes which are resilient to any single link or node failures. 
30 Although simple and fast, the direct application of the ring 
architectures in WDM networks brings a number of problems. It 
is well known that ring-structured protection schemes typically 
rely on excessive capacity redundancy. By contract, one can 
provide protection with substantially less spare capacity on mesh 
35 optical networks. The protection schemes on mesh optical networks 



-1- 



Express Mail No. £L V^3/73 ^i7/c; 



March 17, 2001 



41914/FLC/F179-01-00075 FLA 

were intensively studied in the early 1990s. Nevertheless, 
mesh-based SONET is not widely used due to certain inadequacies , 
notably the slow restoration process that sometimes takes more 
than 2 seconds. 

Typical Digital Cross-Connect Systems (DCSs) in transport 
networks have very limited functionality. Hence only simple 
restoration algorithms were previously developed for mesh 
networks. Recently the emerging use of Optical Cross Connects 
(OXCs) on WDM networks are ' shedding new light on the 
survivability issues of mesh networks. Intelligent OXCs, unlike 
their predecessor DCSs, function much more like Asynchronous 
Transfer Mode (ATM) switches or Internet Protocol (IP) routers. 
OXCs offer dynamic configuration via light path switching and 
allow many management tasks to be carried out in a distributed 
manner. Because of the dominance of IP traffic, IP-oriented 
control plane are being considered for WDM-based optical networks 
in order to provide seamless data transport. The goal is to 
provide integrated functions such as light pajth routing, 
signaling, and restoration. This brings forth a significant shift 
in the management paradigm from centralized control to 
distributed control. This shift in management paradigm has 
significant impact on the design of protection solutions for WDM 
networks. 

Two major issues of network survivability/restoration, 
namely time and resource efficiency, now can be addressed 
separately. Restoration may be handled in two phases, planning 
and activation. Resource efficiency is optimized during the 
planning stage with restoration speed being optimized during the 
activation phase. At the planning phase, protection light paths 
are pre-computed and stored in OXCs before failures occur. At the 
activation phase when actual failure occurs, OXCs switch to 
pre-determined protection light paths. Thus traffic can be 
re-routed promptly in real time. 
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Most of the previously proposed solutions to optimize 
resource utilization in survivable mesh networks assumed that 

5 complete information about traffic demands is known a priori. 
Therefore, the protection paths for these demands were computed 
in a batch, either in a centralized manner or through distributed 
algorithms. The batch computation may work well in conventional 
telecommunication networks where the traffic demand is relatively 

10 static, but batch computations are not suitable in a dynamic, 
data-centric environment such as the bandwidth-on-demand paradigm 
now considered by Optical Domain Service Interconnect (ODSI) and 
Internet Engineering Task Force (IETF) . With batch computation, 
any incremental changes of traffic demand may cause every 

15 existing path to be re-computed, which is not desirable. 

The existing methods to restore path computation can be 
roughly categorized into either path-based or link-based 
approaches. In the former case, upon the detection of the failure 
event by the destination node of the connection, a notification 

20 is sent to the traffic source where the backup path is activated*. 
In the' latter case a failure event is detected and dealt with 
locally, i.e., a "detour" is set up around the failed link/node. 

On the one hand, a path-based approach benefits from its 
ability to create a resource-efficient backup path, but it incurs 

25 longer response time. On the other hand, link-based approach may 
not be able to establish the "optimal" ' protection path, but the 
speed at which a backup path is set up is much higher. 

SUMMARY OF THE INVENTION 

30 According to the present invention, a protection path for 

a link in a working path through a network comprising a set of 
nodes and a set of links between the nodes is determined by using 
a set of link metrics corresponding to wavelength reservations 
for a set of protected links on a set of protection path links. 

35 A set of widths is calculated using the set of link metrics, each 
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width in the set of widths corresponding to a capacity of a 
protection path link to protect the working path link. The set 
5 of widths are used to determine a protection path using 
protection path links with the greatest widths. 

In one aspect of the invention, a data processing system is 
adapted to determine a protection path for a failure event link 
in an optical network of a set of nodes interconnected by a set 
10 of links. The data processing system receives a set of link 
metrics corresponding to wavelength reservations for a set of 
protected links on a set of protection path links. The data 
processing system calculates a set of widths using the set of 
link metrics with each width corresponding to a capacity of a 
Hl5 protection path link to protect the failure event link. The data 
processing system then calculates a protection path including 
protection path links for the failure event link using the set 
p of widths. 

^ In another aspect of the invention, widths are calculated 

% ST 

f ] 1 2 0 as normalized differences between a maximum wavelength 
5 reservation on a protection path link and a wavelength 

2 33. 

: : 

M reservation on the protection path link for a failure event link. 

M A set of possible protection pathways are calculated and a 
maximum width is determined for the set of possible protection 

1225 pathways. The width of a protection path is determined as the 
minimum width of any of the protection path links included in the 
protection path. If the maximum width is greater than zero, then 
a protection pathway is chosen at random from the set of possible 
protection pathways. If the maximum width is equal to zero, then 
30 a protection path is selected by determining which protection 
path has the least number of protection path links with a width 
of zero. 
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BRIEF DESCRIPTION OF THE DRAWINGS 



5 



These and other features, aspects, and advantages of the 
present invention will become better understood with regard to 



the following description, appended claims, and accompanying 
drawings where: 

FIG. 1 is an illustration of a WDM optical network; 

FIG. 2 is an illustration an exemplary WDM network having 
10 a working path and a plurality of possible protection paths; 

FIG. 3 is an illustration of an embodiment of a link metric 
comprising "buckets" to store wavelength reservations according 
to the present invention; 



15 leading to over and under utilization within a network; 

FIG. 4b is an illustration of "node-based" restoration 
leading to a more efficiently utilized network after restoration; 

FIGS. 5a and 5b illustrate "node-based" restoration for 
multiple intermediate nodes in a network; 
20 FIG. 6 is a process flow diagram of a path selection process 

according to the present invention; 

FIG. 7 is a sequence diagram of an embodiment of a 
distributed protection path selection process according to the 
present invention as applied to an exemplary network; and 
25 FIG. 8 is an architecture diagram of an exemplary WDM OXC . 

DETAILED DESCRIPTION OF THE INVENTION 

The present invention comprises a link metric and a set of 
distributed routing methods that maximize wavelength sharing 
30 among independent protection light paths. These methods support 
on-demand path computation, so complete information about traffic 
demand is not required. The link metric and distributed routing 
methods are implemented as a extensions of the existing IP 
routing protocols, e.g., open shortest path first (OSPF) . 



FIG. 
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link-based 
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The resultant protection paths are optimized to reduce 
wavelength redundancy while working light paths are routed using 

5 minimum-hop paths thus separating optimization of the working 
path selection and protection path selection. 

FIG. 1 is an illustration of a WDM optical network. A 
plurality of OXCs are connected in a network and communicate with 
their neighbors using a plurality of wavelengths wherein separate 

10 communication channels correspond to the separate wavelengths 
supported by each OXC in the network. A first source OXC 80 is 
operably coupled to a first terminal OXC 82 via first 
intermediate OXCs 84 and second intermediate OXC 86. The fist 
source OXC communicates to the first terminal OXC via a first 

15 wavelength 88. A second source OXC 90 is operably coupled to a 
second terminal OXC 92 via the first and second intermediate OXCs 
along with the first source and terminal OXCs. However, the 
second source and terminal OXCs use a different wavelength 94 
than the first source and terminal OXCs. This leaves at least 

20 one wavelength 96 in the connection between the first and second, 
intermediate OXCs free for reservation as a link in a protection, 
path. For example, a third source OXC 97 is operably coupled to 
a third terminal OXC 98 via a third intermediate OXC 99. If the 
third intermediate OXC fails, the first and second intermediate 

25 OXCs can be used as an alternative path for the third source and 
terminal OXCs because the first and second intermediate OXCs have 
a wavelength reserved for the third source and terminal OXCs 
use . 

FIG. 2 is an illustration of an exemplary WDM network having 
30 a working path and a plurality of possible protection paths. The 
exemplary network consists of nodes A 100, B 102, C 104, D 106, 
E 108, and F 110. A working pathway between A and C is denoted 
with a solid line linking A to C through B. In the case of a 
link failure within the working pathway, for example a link from 
35 B to C 105, A' s traffic to C can be rerouted through E and F to 
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reach C as denoted by the pathway denoted by the dotted and 
dashed links, 112, 114, and 116, between A, E, F, and C. This is 
5 an example of pathway protection as the entire pathway from A to 
C is protected by an alternate pathway. 

Alternatively, the link between B and C can be protected by 
rerouting the link's traffic through D as noted by the dashed 
links 118 and 120. The alternate route through D is therefore 
10 a protection path for the B to C link. This is an example of 
link protection. 

Given a description of a WDM network, G(N,E) where N is the 
set of nodes and E is the set of links, there exists a set of 
demands U which request light-paths to be established across the 
nl5 networks. These demands are protected by link-based restoration 
w 3 paths. For example, each link on the working path of 

I* demand u E U is protected by an alternative path connecting i and 

□ j. Let x"ij) denote the amount of reserved wavelengths on link 

*"*f (if j) in order to carry the traffic of demand u. Similarly let 

fit 2 0 y^mn)^ the wavelength reservation on link (m,n) for demand u in 
* case link(i,j) fails. Therefore, x\ij) and y^mn) denote the. 

^ routing of working and protection paths respectively. 

U This problem formulation fits well into a centralized 

management paradigm where the Network Management System (NMS) may 
U25 optimally configure every protection path, utilizing the complete 
knowledge of the demand set U. However, such an off-line 
algorithm is not desirable in an environment where the demands 
for light-paths arrive and depart dynamically. It is costly to 
reconfigure the whole network whenever traffic demands change. 
30 Instead, an online protection routing algorithm may be preferred 
in a dynamic environment. 

An online algorithm determines the protection routing based 
on the existing network status. Nor is it assumed that all future 
demands are known or the existing demands can be rerouted. Thus 
35 the objective of an online algorithm is to minimize the marginal 
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wavelength requirement due to any newly arrived demand u*. 
Suppose the working path X(,j) has been determined by the 
minimum-hop path. An optimization problem can be formulated to 
determine the protection path, i.e., y^mn) : 



10 
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In the above constraints, is the additional wavelength 

requirement on link (m, n) if link (m,.n) is used by u* to restore 
from the failure of link (i, j). The additional wavelength 
requirement is based on the reservation sharing with other 
failures. 

{*J,u*) 

Determining ^ is therefore equivalent to finding the 

minimum-cost alternative path from i to i, and the existing. 

yj) 

network status can be aggregated into w( ^ and w{ \ . As 
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result, the protection routing problem in WDM networks draws upon 
shortest path routing algorithms in data networks. 
5 The following is a link metric that provides the necessary 

network state information in an aggregated form. The link metric 
is used in an online protection routing method that fits into the 
framework of current Internet routing. 

The link metric provides protection paths for different link 
10 failures by sharing protection wavelengths since the protection 

paths need not to be activated at the same time. 

The link metric uses a "bucket-based" link state 

representation. In the network G(N,E), each link 1 6 E maintains 

a set of "buckets", fa = [h n k e E, k * /) . Each bucket, fa, 
15 corresponds to a failure event k, and the "height" of the bucket, 

k 

i.e., the value of fa , indicates the protection wavelengths 

reserved on link 1 for the failure event k. In terms of the 

notation in the statement of the optimization problem, we have 

k Uj) 

the correspondence fa = w\ mn ) for link l={m,n) and failure 
20 .k=(i,j). The number of wavelengths needed to be reserved is 

k 

equal to the maximum of the bucket heights or max*/// • Thus the 

necessary information on the sharing potential offered by each 

link is captured by maintaining a sequence of values indexed by 

the failure events. 

25 The sharing potential is a function of the failure event. 

For example, in FIG. 3, link 4 200 can serve as a link in a 

protection path for link 1 202, link 2 204, and link 3 206. Link 

l 

4 therefore maintains three buckets: bucket /j 4 208 for link 1, 

2 3 

bucket fa 210 for link 2, and bucket ^ 212 for link 3. In this 
30 example, link 4 has reserved two wavelengths for link 2 and only 
one wavelength for links 1 and 3. This indicates that in order 
to protect an additional wavelength on link 2, link 4 has to 
reserve an extra wavelength if it is selected as part of a 
protection path for link 2. On the contrary, to protect an 
35 additional wavelength on links 1 or. 3, no extra wavelength needs 
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to be reserved. This is because link 4 has already reserved two 
wavelengths for link 2 and the reservation of these two 

5 wavelengths can be shared with either link 1 or 3, thus not 
requiring the allocation of another wavelength. 

In one embodiment of the present invention, the previously 
described link metric is coupled with a "shortest-widest" 
algorithm within a process to determine a protection path through 

10 a network for a particular link. The "width", l_width (1 , k*) , of 

a link 1 with respect to a link failure k*, is defined as the 

k 

normalized difference between the maximum bucket height, max*/?/ ' 
and the bucket corresponding to link failure k* , The width is 



15 



20 



25 



30 



35 



calculated as 



1 width{l,k*) = l- 



max*# 

k 

if rnax^/z/ > 0 and 0 if otherwise. Therefore, l_width (1 ,k*) is 
between 0 and 1, and this value indicates the sharing capability 
link 1 has to offer for the protection of the failure k* i.e.., 
the greater the value the greater the sharing capability. If the 
value of a l_width(l ,k*) is 0, then the link is said to be 
"exhausted" and must reserve an additional wavelength if it is 
to serve as a link in a protection path. 

In one embodiment of the invention, a modified Bellman-Ford 
algorithm is used to identify the widest paths between the end 
nodes of the protected link, i.e., the path that offers the most 
sharing. Here the width of the path p with respect to a link 
failure p_width (p, k*) , is defined to be the minimum of its 

link components, i.e., p_width{p,k*)= min lep l_width ( 1 f k*) . 

By this definition the marginal cost of traversing a path 
is dictated by the "narrowest" links along the path. In the 
event that there are more than one such path candidates, and 
their widths are all 0 (i.e., these paths all go through links 
with non-zero marginal wavelength consumption) , the link 

-10- 



March 17, 2001 



1 41914/FLC/F179-01-00075 FLA 

traversing the least number of "exhausted" links, i.e., the links 
of width 0, is selected. On all other cases of tie breaking with 
5 positive path width, i.e., the marginal costs are zero, a widest 
path is randomly selected. The above described protection path 
selection method requires . only the current demand and no 
knowledge of future arrivals to determine an efficient protection 
path . 

10 In one embodiment of the present invention, the above 

described link-based protection path selection method is modified 

to be a node-based protection path selection method. The 

previously described "bucket"-based link metric and corresponding 

shortest-widest routing algorithm are based on the loss of an 

f 315 optical signal caused by a link failure. The resultant 

\i calculated protection paths are constrained to go from one end 

ll of the protected link to the other end. Being forced to go from 

C3 one end of the failure link to the other end, even for the 

*'t traversing demands that are destined to different nodes, the 

fU2 0 group of restoration paths may unwittingly clog the "local area" 

; a and under-utilize the potential sharing capability in the 
i. ^ 

s'.s network. FIGS. 4a and 4b illustrate this situation. 

H FIG. 4a is a diagram illustrating the demands of two working 

zl paths sharing a single link. A first source node 400 is operably 

~ fir 

>*25 coupled to a first terminal node 401 through a first intermediate 
node 4 02, and a second intermediate node 4 03 thus creating a 
first link 405 between the first intermediate node and the second 
intermediate node. A second source node 406 is operably coupled 
to a second terminal node 407 through the first and second 

30 intermediate nodes thus creating a second link 410 between the 
first and second intermediate nodes. 

With link-based restoration, a protection paths for the 
demands from the first and second source nodes to the first and 
second terminal nodes begin at the first intermediate node and 

35 terminate at the second intermediate node. This creates two 
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protection paths 414 and 416 passing through a third intermediate 
node 412. This may limit the possible inclusion of alternative 
protection paths including fourth intermediate node 418. 

Alternatively, if protection paths are selected such that 
they start from the first intermediate node and end at a fifth 
intermediate node 404 and a sixth intermediate node 408 
respectively, there is a better chance for the exploitation of 
"network-wide" sharing potential including the third intermediate 
node . 

FIG. 4b is an alternative solution to the restoration 
problem of FIG. 4a. This restoration solution is herein termed 
a "node-based" restoration solution. A first source node 400 is 
operably coupled to a first terminal node 401 through a first 
intermediate node 402, and a second intermediate node 403 thus 
creating a first link 405 between the first intermediate node and 
the second intermediate node. A second source node 406 is 
operably coupled to a second terminal node 407 through the first 
and second intermediate nodes thus creating a second link 410 
between the first and second intermediate nodes. 

With a node-based restoration scheme, protection paths for 
the demands from the first and second source nodes to the first 
and second terminal nodes begin at the first intermediate node 
and terminate at the fifth and sixth intermediate nodes 
respectively. This creates two protection paths. A first 
protection path 419 passes through a third intermediate node 412. 
A second protection path 420 passes through a third intermediate 
node 418. These alternative protection paths include a 
"network-wide" sharing potential not available in a link-based 
protection path scenario. 

FIGS. 5a and 5b illustrate another restoration mechanism, 
wherein the protection path for a given link ends at the node two 
hops away on the corresponding working path. This restoration 
mechanism is also a form of node-based restoration. For example, 
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in FIG. 5a, protection path 505 is a link-based protection path 
protecting link 500 between a source node 502 to a first 
5 intermediate node 504. Alternatively, in FIG. 5b, a protection 
path 506 protecting link 500 is constructed linking a source node 
500 to a second intermediate node' 508. A special case of a node- 
based protection path is protection path 510 linking the second 
intermediate node to a terminal node 512. In this case, the 
10 node-based protection path has the same end nodes as its 
link-based counterpart, since the terminal node is the 
destination and there are no nodes further down the working path. 

A failed node may also cause disrupted service, in which 
case all links adjacent to the failed node will "fail" 
□15 simultaneously. Under such condition, the construction of the 
1% protection path for a particular link should consciously exclude 
U the links that are experiencing a problem at the same time. 
" However, differentiation of a link or nodal failure often takes 
."5 time and causes undesirable delay in service restoration. In 
f J2 0 certain cases it is more advantageous to be conservative, i.e., 
«a to use nodal failure as the general model of the failure event, 
LJ and treat a single link failure as a special case. The node-based 
" M j ump-ahead" operation proposed above is well suited to implement 
n such a strategy. 

^25 FIG. . 6 is a process flow diagram depicting one embodiment of 

a path selection process according to the present invention. The 
path selection process accepts as input 600: a description of the 
networks as G(N,E) where N is a set of nodes and E is a set of 
links between the nodes of N; s a source node to which a path is 
30 to be found to t a terminal node; and a set of vectors of 
previously described link metrics associated with each link in E, 
h e . 

The path selection process determines a working path of 
links, r(s,t), between s and t 602. Each link in the working 
35 path is capable of failing and generating a failure event; 
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therefore, for each link in the working path there is a 
corresponding possible link failure, k* . For each possible link 
5 failure in the working path the path selection process determines 
a protection path 604. 

The path selection process determines a start node, s_node, 
and a destination node, d_node, for the possible link failure k* 
606. 

10 From the start node, a width for each link in the network 

608 is calculated 610 as previously described using link metrics 
taken from h e . The width of the possible link failure back to 
itself is removed from consideration as a protection path 614. 

Using the set of widths calculated at step 608, the path 
C3 1 5 selection process determines a set of possible protection paths, 
1% widest_paths , and determines the width of the widest protection 
U path, widest_width, using the previously calculated widths. If 
li the width of the widest possible protection path through all of 
*5 the possible protection paths is zero, this means all of the 
fU2 0 possible protection paths in the set widest_paths include at 
^ least one exhausted link as previously described. 
Id If the number of possible protection paths in widest_paths 

is greater than one and the widest width is equal to zero 618, 
H the path selection process selects a protection path for possible 
M25 link failure k*, p[k*], by selecting the protection path in the 
set of possible protection paths containing the least number of 
exhausted links, steps 620, 622, and 626. 

If the widest width is greater than zero and there is more 
than one possible protection path in the set widest^paths 628, 
30 the path selection process selects a protection path for possible 
link failure Jc*, p[k*], at random from the set of possible 
protection paths 630. 

If there is only a single possible protection path in the 
set of possible protection paths, then the single possible 
35 protection path in the set of possible protection paths is 
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selected by the path selection process 632 as the protection path 
for possible link failure k* , p[k*]. 
5 The path selection process continues selecting protection 

paths until it has selected a protection path for each possible 
link failure in the working path 634 . 

The path selection process returns r(s,t) which is the 
working path, and a set of protection paths for all of the 
10 possible link failures in the working path. 

In another embodiment of the present invention, the process 
depicted in FIG. 6 is distributed across a network with each node 
in a pathway determining a protection path for its link to the 
next node in the pathway. FIG. 7 depicts the process of FIG. 6 
C3l5 distributed across a pathway through a network. 

1% ' FIG. 7 is a sequence diagram of an embodiment of a 

U distributed protection path selection process according to the 

^ present invention as applied to an exemplary network. In 

SO 

response to a request to establish a light-path through a 
FU20 network, source node 700 computes the end-to-end working path as 
% previously described in step 602 (FIG. 6). In this example, the 
Ly working path is source node to node Nl 706 to node N2 716 to 
'[* terminal node 724. 

r=j The source node sends a setup message 704 to node Nl . The 

H25 setup message includes the working path so that node Nl knows the 
next node in the working path. Node Nl configures itself 707 to 
be part of the working path. 

The source node determines a protection path for the source 
nodes' s link to node Nl as previously described in steps 606-634 
30 (FIG. 6). The source node signals all related nodes to do a 
proper configuration. In this example, node S-Nl 721 is selected 
as a node in a protection path for the link between the source 
node and node Nl. The source node sends a notification 710 to 
node S-Nl so that node S-Nl will reserve a wavelength for 
35 protection of the link between the source node and node Nl. 



-15- 



March 17, 2001 
1 41914/FLC/F179-01-00075 FLA 

Node Nl forwards the setup message 714 to the next node in 
the pathway, node N2 . Node Nl doesn't determine the next node in 

5 the pathway as the source node has included the pathway in the 
setup message. However, node Nl is responsible for selecting a 
protection path to protect the link between node Nl and node N2 . 
Node Nl computes a protection path for the link between node Nl 
and node N2 as previously described in steps 606-634 (FIG. 6) 

10 718. 

In this example, node N1-N2 722 is selected as a node in a 
protection path for the link between node Nl and node N2 . Node 
Nl sends a notification message 720 to node N1-N2 so that node 
N1-N2 can reconfigure itself as a node in a protection path. 
^15 Each node in the working pathway repeats the process of 

?g configuring itself as part of the working path, signaling the 
H next node in the working path, determining a protection path for 
the link to the next node in the working path, and signaling the 
%l nodes along the protection path to configure themselves for use 
^"20 in a protection path. 

5 

?3 FIG. 8 is an architecture diagram of an exemplary embodiment 

U of an OXC . The exemplary OXC 800 comprises an optical switch 
n fabric 802 for switching a plurality of optical inputs 803 

0 between a plurality of optical outputs 805, a wavelength 
?== 25 demultiplexer 804 operably coupled to the plurality of optical 
inputs for separating out the separate, wavelengths in an input 
multi-wavelength signal 808, a wavelength multiplexer 806 
operably coupled to the plurality of optical outputs for 
combining the optical outputs into a single multi-wavelength 
30 output signal 810. 

The optical switch fabric is operably coupled to a 
controller. The controller determines which of the plurality of 
optical inputs to switch between the plurality of optical, outputs 
and sends appropriate switching control signals 824 to the 
35 optical switch fabric. 
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The controller includes a processor 818 for execution of 
controller instructions 814 implementing the previously described 
5 distributed protection path selection method. The controller 
includes a Random Access Memory (RAM) for storage of intermediate 
results while calculating protection paths and for storage of 
previously described bucket data. 

The controller receives input network management signals 820 
10 from other OXCs in a network. The network management signals 
include information about the configuration of other OXCs in the 
network including the previously described bucket information. 
The input network management signals also include previously 
described setup messages from other OXCs requesting the exemplary 
^3 15 OXC to reconfigure itself to be a node in a working pathway and 
fri notification messages requesting the exemplary OXC to reconfigure 

M itself as a node in a protection pathway. 

;% The controller transmits output network management signals 

□ to other nodes in the network. The output network management 

^20 signals include information about the configuration of the 

exemplary OXC including previously described bucket information 
LJ about the number of wavelengths used and reserved by the 
[~ s exemplary OXC. The output network management signals also 
p include setup messages requesting the other nodes to reconfigure 

^~25 themselves as nodes in a working pathway. The output network 

management signals also include notification messages requesting 

other nodes to reconfigure themselves a nodes in a protection 

pathway. 

Although this invention has been described in certain 
30 specific embodiments, many additional modifications and 
variations would be apparent to those skilled in the art. It is 
therefore to be understood that this invention may be practiced 
otherwise than as specifically described. Thus, the present 
embodiments of the invention should be considered in all respects 
35 as illustrative and not restrictive, the scope of the invention 
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to be determined by the claims supported by this application and 
their equivalents rather than the foregoing description. 
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